This vulnerability (CVE-2026-54184) in Clean Login (versions <= 1.15) is an unauthenticated IDOR issue that enables attackers to bypass authorization mechanisms by manipulating user-controlled keys. It is categorized under CWE-639, indicating an authorization bypass due to improper validation of user-supplied keys. The CVSS 3.1 base score is 8.2, reflecting network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality impact, but integrity loss and high availability impact. No vendor advisory or patch information is provided, and the product is not a cloud service, so remediation status is unknown.

The vulnerability allows unauthenticated attackers to bypass authorization controls, potentially modifying or disrupting system integrity and causing high impact on availability. Confidentiality is not affected. The high CVSS score indicates a serious risk if exploited, though no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is documented, users should monitor vendor communications closely and consider restricting access or applying compensating controls until a patch is available.